diff --git a/tasks/configure_ssh_hardening.yml b/tasks/configure_ssh_hardening.yml
index f96eff9a33d8dcac2f0a15c9064edf738969dabc..ef041e7ccfc6d310394d04beacd0e6d87997877d 100644
--- a/tasks/configure_ssh_hardening.yml
+++ b/tasks/configure_ssh_hardening.yml
@@ -26,7 +26,7 @@
       # Ciphers aes128-ctr,aes192-ctr,aes256-ctr
       LogLevel VERBOSE
       # AuthorizedKeysFile /etc/ssh/authorized-keys/%u
-      AllowTcpForwarding no
+      AllowTcpForwarding yes
       GatewayPorts no
       PermitTunnel no
       X11Forwarding no